Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
File: y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft (raw, json)
Hash identifier: Mok4hraFV21JqlJCVLwtFwGMatv7JbsOfw1AnpQVEOA=
Subject key identifier: B1:40:55:A2:11:57:28:55:D8:99:92:E6:D5:04:9D:4E:B6:B9:02:1F
Authority key identifier: CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD
Certificate issuer: /CN=cb608201f88aeae9486b9fa87189d796c54027dd
Certificate serial: 01967ED8E14ADC47B4BFE612E10F29076EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
Manifest number: 059A
Signing time: Tue 29 Apr 2025 00:01:04 +0000
Manifest this update: Tue 29 Apr 2025 00:01:04 +0000
Manifest next update: Wed 30 Apr 2025 00:01:04 +0000
Files and hashes: 1: TuQDQ8nJBbYLub1mzr6Exv_MEOE.roa (hash: mNd0eAJJzc4YIh0tYa+bIHu2wbr2Q6C9CMzRK0s5ooI=)
2: y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl (hash: o7Vhdg4cJ4Dh99zVm4/Ij7zf27beQHCcn0GqxhdttMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:e1:4a:dc:47:b4:bf:e6:12:e1:0f:29:07:6e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb608201f88aeae9486b9fa87189d796c54027dd
Validity
Not Before: Apr 29 00:01:04 2025 GMT
Not After : Apr 30 00:01:04 2025 GMT
Subject: CN=b14055a211572855d89992e6d5049d4eb6b9021f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d8:f4:a3:17:89:d2:ad:04:c5:0d:7c:fd:bf:
c5:ff:3d:55:82:3b:08:a5:59:00:a1:88:71:2f:79:
52:7c:1c:83:6a:d3:29:c2:f5:8f:e3:9f:b3:81:06:
b3:64:16:03:5b:01:f3:7e:0a:1f:34:19:2f:da:5b:
d8:51:f3:7d:70:ea:f1:82:37:11:a1:08:0e:b2:bf:
d6:a5:d2:b8:f7:f5:d4:ea:28:dc:ca:83:e5:0e:ca:
1a:92:1e:d6:c7:8b:b9:ef:30:10:f5:f2:de:6b:40:
5a:90:a7:8f:a9:30:9a:92:98:9b:63:ee:f7:75:47:
e5:e4:a2:ab:0e:69:37:0a:ad:de:d8:5c:59:9c:ba:
41:a9:a8:bb:13:5c:59:53:5d:71:d6:55:a4:df:8b:
9d:ad:2d:f3:b4:76:b4:14:6d:6e:f7:92:16:96:51:
e7:2d:56:52:c1:ce:c4:c9:61:9d:80:af:e3:75:73:
c4:2a:c5:6d:97:c7:b5:a3:28:5c:57:69:f6:fa:0d:
9e:6b:c1:45:93:9d:81:c5:10:7a:95:a8:1e:96:e6:
3d:ca:c5:e0:95:51:ab:72:83:97:0e:85:45:d7:00:
96:2b:04:74:1e:b1:40:aa:ae:6b:d2:45:05:61:08:
12:15:c7:d2:7f:46:16:a7:92:af:8a:42:7d:2a:aa:
86:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:40:55:A2:11:57:28:55:D8:99:92:E6:D5:04:9D:4E:B6:B9:02:1F
X509v3 Authority Key Identifier:
keyid:CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:11:75:ff:82:5b:18:03:fc:db:84:08:88:45:84:e0:37:69:
fb:c3:70:c2:52:a2:2a:97:ba:2e:45:79:5c:4e:8e:b1:4a:ba:
2a:b2:37:b1:51:69:35:b8:f2:56:ec:cb:b5:ab:2a:62:68:3c:
9e:27:72:57:40:58:d9:e2:df:92:40:bc:1d:a7:0e:b0:32:14:
92:90:22:53:21:2e:be:8c:df:8a:5e:40:38:ec:0f:51:a9:43:
f7:62:bb:38:3e:c4:4d:3f:09:58:14:df:65:d8:6e:e6:c5:e9:
5a:5a:88:59:6b:3a:70:73:f2:1e:9c:d8:ae:6d:07:fb:2d:89:
ae:ab:f5:f4:43:a6:c1:d3:91:ef:33:31:fd:59:13:5e:f5:f3:
de:50:28:37:2b:e4:c5:5e:09:e6:db:21:c4:96:7b:85:cc:9d:
98:9e:b3:32:fb:76:b9:5f:32:28:b3:df:ab:0f:6e:93:77:ad:
27:c5:eb:70:09:2c:46:8e:d8:c0:7c:50:18:0d:4b:b1:d4:69:
ff:ef:3c:45:73:d7:6a:66:82:db:7a:83:55:7f:a1:21:94:82:
62:aa:da:b7:21:67:95:c6:64:e6:37:5b:27:1a:3f:8b:2b:6b:
bf:51:d8:28:48:3e:db:3c:92:81:b8:6e:0e:90:4e:34:f4:f4:
a6:4b:8b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:37:57 2025 by rpki-client